Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a3a2f33322d3438203d3e20323636323437.roa
File: 323830343a336430303a3a2f33322d3438203d3e20323636323437.roa (raw, json)
Hash identifier: Ccgyub7HknLRBbmOBU7k16DMMuWBT4u5yNsTVXHTKIM=
Subject key identifier: 0E:75:F7:22:96:B7:F9:72:D5:59:D9:34:29:A2:1B:DC:B4:D8:66:9A
Certificate issuer: /CN=B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3
Certificate serial: 6F169ACA14D094259B5C52C7C79D65FDD5ECF8B4
Authority key identifier: B8:3B:32:E1:BB:72:C1:AF:F2:17:58:A4:42:A3:C4:CF:6B:35:E2:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a3a2f33322d3438203d3e20323636323437.roa
Signing time: Tue 08 Jul 2025 18:45:48 +0000
ROA not before: Tue 08 Jul 2025 18:40:48 +0000
ROA not after: Tue 07 Jul 2026 18:45:48 +0000
asID: 266247
IP address blocks: 2804:3d00::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:16:9a:ca:14:d0:94:25:9b:5c:52:c7:c7:9d:65:fd:d5:ec:f8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3
Validity
Not Before: Jul 8 18:40:48 2025 GMT
Not After : Jul 7 18:45:48 2026 GMT
Subject: CN=0E75F72296B7F972D559D93429A21BDCB4D8669A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5e:84:48:60:dc:14:ac:76:9b:66:db:47:44:
d5:9f:03:a6:08:e4:87:cc:f2:ba:49:2a:37:de:1d:
7b:f9:24:9e:da:d6:3e:15:f4:a9:ad:37:90:c1:ce:
9d:37:b2:9a:03:fa:96:82:7b:22:8d:e5:0a:6c:0c:
07:e2:75:8d:c4:39:2b:5d:c5:d8:3d:49:c0:8f:01:
67:3e:db:50:46:df:6b:b2:47:5b:e5:7b:f0:3e:ce:
9c:e4:32:d5:1f:c0:f5:0a:02:46:03:3d:dc:a1:8e:
5f:84:60:1a:8d:dd:f1:9c:f4:e0:a2:88:c0:1f:69:
a0:d4:b9:c5:62:37:e1:7a:b2:e3:be:f6:68:78:3f:
a2:3d:db:57:0a:34:f2:a1:df:3e:65:99:96:63:88:
92:9d:f4:8f:ca:ce:cc:9a:82:9a:d6:16:82:a8:24:
5f:ca:fd:20:4f:69:34:4a:65:bc:0c:66:9c:01:f1:
3b:a1:aa:e5:2a:60:ea:73:78:fb:5b:76:3e:16:c6:
74:3c:ca:1e:7f:cd:1c:e3:9d:1b:d8:ba:c7:86:e1:
fd:8c:f6:32:22:2d:35:07:73:87:16:75:ba:cc:51:
e3:d8:12:09:24:e1:54:87:40:d6:0c:5e:e3:91:f0:
33:41:9a:78:2b:8e:97:f0:f5:ae:c5:9b:7f:08:2b:
db:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:75:F7:22:96:B7:F9:72:D5:59:D9:34:29:A2:1B:DC:B4:D8:66:9A
X509v3 Authority Key Identifier:
keyid:B8:3B:32:E1:BB:72:C1:AF:F2:17:58:A4:42:A3:C4:CF:6B:35:E2:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a3a2f33322d3438203d3e20323636323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3d00::/32
Signature Algorithm: sha256WithRSAEncryption
a1:03:6c:a7:6d:0c:2e:92:c4:13:67:14:1e:96:0a:09:b3:d4:
93:cb:9c:5e:1d:b5:d7:49:ff:c2:94:58:9d:af:e9:79:c8:cb:
58:ca:c5:cd:ef:b4:e4:47:ba:e5:ee:75:8e:8e:59:d2:2b:2b:
37:c2:ad:0a:f4:47:57:bf:d9:28:c6:69:7b:9d:9d:d0:09:ce:
f2:d8:77:d3:81:89:c0:9e:50:a0:7f:77:3c:a5:18:de:5f:fd:
1f:bd:26:aa:1a:56:a0:08:d2:f1:ef:33:47:6a:8f:94:c7:5e:
35:59:ca:c5:12:c9:35:b4:d9:c4:0d:47:78:a0:75:46:6b:65:
8d:c7:0f:0e:b7:8f:c8:6a:09:69:0f:18:68:a0:e3:d1:3f:f4:
4c:df:2e:17:e6:64:d0:35:49:d0:0c:63:0a:3b:a2:12:6d:65:
db:e9:a6:6c:72:49:b5:fd:e4:da:80:c9:ab:b9:76:04:31:df:
9d:10:fc:56:ee:c6:c7:27:b0:a0:c5:79:2b:5e:e0:b9:b2:1b:
16:53:2a:37:ed:60:f6:32:e4:0c:ff:3c:75:ea:23:8c:61:e5:
f3:fc:1a:38:e7:6b:ce:3d:84:56:ae:51:8f:f7:9f:04:93:88:
11:83:82:97:56:0d:35:fb:4c:15:d5:cf:7b:2f:b5:34:63:b5:
73:fe:17:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 13:40:36 2025 by rpki-client